WID-SEC-W-2026-0221

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Office-Produkte und Microsoft 365-Apps: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

view advisory published 2026-01-26

Ein lokaler Angreifer kann eine Schwachstelle in Microsoft Office 2016, Office 2019, Office LTSC 2021, Office LTSC 2024 und Microsoft 365 Apps for Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-21509US—OT criticalKEV
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan